Old Mutual is a pan-African financial services group headquartered in Sandton, South Africa, with operations spanning Zimbabwe, Namibia, Botswana, and the broader African continent. Founded in 1845, it manages over R1.04 trillion in assets across life insurance, investments, savings, asset management, banking (through OM Bank), and short-term insurance. The company is listed on the Johannesburg Stock Exchange with secondary listings in Zimbabwe, Namibia, and Botswana, and employs over 31,000 people.
For a cybersecurity team, the threat model here is broad and high-stakes: a financial institution of this scale and geographic spread is protecting sensitive policyholder data, banking transactions, investment portfolios, and cross-border financial flows across multiple regulatory jurisdictions. The attack surface includes legacy insurance platforms, modern banking infrastructure, asset management systems, and customer-facing digital channels - each carrying distinct risk profiles in regions where financial fraud and cyber-enabled crime remain persistent threats.
Old Mutual's 180-year history means the technology estate is layered: decades of accumulated systems sitting alongside ongoing digital transformation. Security teams here are likely dealing with the realities of hybrid infrastructure, regulatory compliance across multiple African markets, and the challenge of defending a diversified financial group rather than a single product line. The scope is enterprise-grade, the regulatory expectations are real, and the operational complexity of securing financial services across the continent is substantial.